Branch: refs/heads/RN-110 Home: https://github.com/xwiki-contrib/application-releasenotes Commit: 9e7ba3defdb6488b2d5d1698342a7938bcb0d8d2 https://github.com/xwiki-contrib/application-releasenotes/commit/9e7ba3defdb... Author: Vincent Massol <[email protected]> Date: 2026-09-05 (Sat, 05 Sep 2026) Changed paths: M application-releasenotes-ui/src/main/resources/ReleaseNotes/Code/MigrationFrom1x.xml M application-releasenotes-ui/src/main/resources/ReleaseNotes/Code/Translations.xml A application-releasenotes-ui/src/test/java/org/xwiki/releasenotes/MigrationFrom1xPageTest.java A application-releasenotes-ui/src/test/java/org/xwiki/releasenotes/SecurityScriptServiceStub.java Log Message: ----------- RN-110: The 1.x migration can be run by any user who can view its page * Gate the whole MigrationFrom1x page body on wiki-level admin rights: the migration's query is wiki-wide and its conversion removes the 1.x object it reads, so administering the wiki is what running it takes. The guard covers the listing as well as the conversion. * Enforce wiki_admin as a required right on that page. The guard lives in the page content, so on its own it lasts only as long as nobody rewrites that content; enforcing the right makes XWiki refuse edit on the document to anyone who does not already hold the right the guard tests for. * Add the releasenotes.migration.notAllowed translation key for the refusal message. * Add MigrationFrom1xPageTest covering the refusal, the unchanged administrator behaviour and the required rights the page declares, plus SecurityScriptServiceStub since PageTest has no authorization script service. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/application-releasenotes/settings/notificat...